Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa
File:                     3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (raw, json)
Hash identifier:          EeNhXVZoY+0h9zSQ02AP/WqH8D7bFLdvdC2KMXqIfTQ=
Subject key identifier:   24:58:A9:F9:84:27:68:2A:42:F9:4F:9A:A0:90:84:B6:B4:82:93:93
Certificate issuer:       /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
Certificate serial:       179EF4103C4F3179DA2C90B1C1B081FF37235578
Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa
Signing time:             Mon 31 Jul 2023 00:04:41 +0000
ROA not before:           Sun 30 Jul 2023 23:59:41 +0000
ROA not after:            Mon 29 Jul 2024 00:04:41 +0000
asID:                     134648
IP address blocks:        103.208.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl
                          rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 03:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9e:f4:10:3c:4f:31:79:da:2c:90:b1:c1:b0:81:ff:37:23:55:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
        Validity
            Not Before: Jul 30 23:59:41 2023 GMT
            Not After : Jul 29 00:04:41 2024 GMT
        Subject: CN=2458A9F98427682A42F94F9AA09084B6B4829393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:15:82:c1:01:de:57:8e:83:61:b8:6f:b7:
                    f2:7f:8d:8d:a2:39:d5:48:5b:78:f7:6a:5c:13:5c:
                    b1:e7:d4:12:54:f2:a5:a1:6c:ef:6b:09:44:3b:1c:
                    fd:bf:b8:d8:5e:ff:51:22:5c:c1:d8:0b:f0:7f:de:
                    56:53:37:41:16:5b:51:99:11:3e:08:4a:75:1c:82:
                    0c:d0:df:01:28:4d:4b:93:67:b2:00:55:c4:44:32:
                    f0:e0:dd:2e:15:f0:c4:bf:36:0f:9d:74:39:a7:61:
                    31:42:0b:3b:f5:27:04:92:2f:b1:54:e5:75:ca:b9:
                    45:b1:ca:ca:39:f0:a6:a7:4b:54:7b:cc:b3:fc:b1:
                    8c:72:60:8c:0f:32:c6:b8:12:4f:90:93:cf:b1:dc:
                    2c:bc:9a:33:61:ef:cd:51:36:23:a8:61:18:7a:23:
                    95:27:20:72:29:f2:e0:f2:5a:e6:3d:c5:72:f4:0e:
                    a9:46:7f:cc:51:34:42:be:36:73:04:2b:98:c2:ee:
                    d8:94:2a:21:6c:a0:bf:18:69:58:03:24:14:91:25:
                    b7:6d:b0:49:76:8c:d4:cb:c0:e3:27:59:77:bd:4d:
                    4a:fe:91:a5:94:e1:d4:b2:2c:ea:4e:9b:e0:bb:59:
                    1d:af:58:ea:53:00:7b:c7:c1:10:23:6e:18:35:7b:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:A9:F9:84:27:68:2A:42:F9:4F:9A:A0:90:84:B6:B4:82:93:93
            X509v3 Authority Key Identifier:
                keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:96:be:ef:e1:c5:b5:13:85:68:e9:13:ac:65:f2:fb:a6:
         39:2f:e3:7d:38:ad:fa:fc:68:ec:6e:fb:55:65:be:69:9a:27:
         78:46:c7:5c:82:41:4a:83:1c:02:55:37:7d:6d:8e:99:fe:80:
         68:57:5a:e4:c7:8a:04:58:e2:c1:cb:fd:57:1f:c7:a8:71:57:
         a2:ca:6e:f7:cf:a1:69:9f:fa:93:05:81:6b:b4:40:91:65:87:
         67:08:11:eb:7d:6d:55:cc:c1:fd:81:8f:52:ab:81:72:1c:7a:
         ff:b6:67:fe:3e:98:22:1e:52:ae:8f:ee:38:71:35:91:6a:9d:
         f3:3b:07:27:3d:ca:94:d1:c4:02:a1:4d:9a:6b:c8:04:8f:fb:
         4c:19:70:b1:f7:56:1c:37:7e:2b:91:8e:be:62:15:e4:18:98:
         ee:9c:40:2f:e5:70:ff:65:f9:e2:ec:e9:9d:08:90:fd:eb:22:
         e9:42:91:52:0a:54:27:e1:b2:fa:5a:52:3f:5d:72:fa:6f:0c:
         fc:c9:65:b0:8e:ba:b8:5b:80:10:1d:57:36:62:ef:6f:cf:c3:
         af:91:9a:28:e9:67:ce:f6:f3:cb:8e:41:df:0e:19:1e:0a:2f:
         fc:f3:a6:2c:c5:73:16:e2:2f:ce:17:d8:7e:48:ce:66:4d:4d:
         4d:e1:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:33:43 2024 by rpki-client on console-ams.rpki-client.org